Static task
static1
Behavioral task
behavioral1
Sample
591c31239380017c259a0a50ce8a6885.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
591c31239380017c259a0a50ce8a6885.exe
Resource
win10v2004-20231215-en
General
-
Target
591c31239380017c259a0a50ce8a6885
-
Size
19KB
-
MD5
591c31239380017c259a0a50ce8a6885
-
SHA1
37dccd3b2710b69f085dcf2826f55960b6792e4c
-
SHA256
f88382b44df572c0c156e2ec5c6c8c73d1d2fe0a8f00a0d593ccb81e7ed56161
-
SHA512
42e783822dcd0ec73d35e2820aecec1a87094c2fde6b4f8f9bdb3857f88d420da2ae3527a1c5b16542c0ff74a616439f61be2a338baff7b446b4652579cc9f7e
-
SSDEEP
192:mYFJBvu7iSxjnZS6QW4VXvfoAjw+8a2cKffHS2nwSA5Rj4O9841utb7cLbCK6h:mYRm2WnZS6Qr0RaS2tZ1u/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 591c31239380017c259a0a50ce8a6885
Files
-
591c31239380017c259a0a50ce8a6885.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 253B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ